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Abstract. In this paper, we prove that for any a, M G N with (a, M) = 1, 
there are infinitely many Carmichael numbers m such that m = a mod M. 

1. Introduction 
Fermat's Little Theorem asserts that if m is prime then 

a m = a (mod m). 

In 1910, investigations by R.D. Carmichael [Ca] into whether the converse of Fer- 
mat's Little Theorem is true unearthed the following objects: 

Definition 1.1. Let m £ N. If m\a m — a for every a G Z and m is not prime then 
m is a Carmichael Number . 

Although Carmichael numbers would seem at first glance to be extremely rare 
(there are only seven Carmichael numbers less than 10,000), it was nevertheless 
proven by Alford, Granville, and Pomerance in 1994 that there are infinitely many 
[AGP]; in fact, subsequent results have proven a lower bound of roug hly x 1 / 3 for 
the density of this set [Ha2], and it has been conjectured that the density is actually 
x l ~°W (see [Er], [GP]). 

After the proof of the infinitude of Carmichael numbers in [AGP] , focus began to 
turn to natural follow-up questions, including the occurrence of Carmichael numbers 
in arithmetic progressions. To this end, the following conjecture was made: 

Conjecture. Let M be a positive integer, and let (a,M) = 1. Then there are 
infinitely many Carmichael numbers m such that 

m = a (mod M). 

Although this conjecture has been open for some time, it has not been without 
progress. For instance, the original proof of infinitely many Carmichael numbers 
is easily altered to prove the case where m = 1 (mod M). Banks and Pomerance 
[BP] gave a conditional proof of the above conjecture in 2010, although their proof 
required the assumption of a very strong (stronger than GRH) conjecture on the 
size of the first prime in an arithmetic progression. In 2012, Matomaki [Ma] gave 
an unconditional proof for the special case where a is a quadratic residue mod 
M. However, the general case remained open; in fact, for a given M, it has not 
previously been known whether there are infinitely many Carmichael numbers that 
are not quadratic residues modulo M. 

In this paper, however, we resolve this conjecture completely. In particular, we 
have the following: 
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Main Theorem. Let M be a positive integer, and let (a,M) — 1. Then there are 
infinitely many Carmichael numbers m such that 

m = a (mod M). 

Specifically, if we let Cm,o,{X) denote the number of Carmichael numbers up to X 
that are congruent to a mod M, there exists a constant K > for which 

C M .a( X ) >>X(™?. 

This constant K is explicitly computable (although it depends on M). We do 
not engage in the computation of K here for two reasons: doing so would make the 
paper somewhat less transparent, and it seems likely that our bound is well short 
of the actual lower bound for this quantity. 

As is the case with nearly every paper written about the infinitude of Carmichael 
numbers since 1994, the proof in the current paper generally follows the outline of 
[AGP]. In particular, we begin by creating an L with many factors d; we then show 
that for these d, there are many primes of the form dk+1 for k relatively prime to L. 
After finding a single k which yields sufficiently many of these types of primes, we 
show that some subset of our primes can be combined to form Carmichael numbers. 
Matomaki [Ma] was the first to demonstrate how one can use this framework to 
prove properties about Carmichael numbers in arithmetic progressions; the present 
paper capitalizes on the alterations to the traditional framework that were intro- 
duced in that paper, using these new methods and adapting them to prove our 
results. 

In the current paper, however, we introduce one major change from other meth- 
ods: we make additional requirements on our primes p in relation to L. In particu- 
lar, we require that each of our primes p be a quadratic residue mod L. Of course, 
the p will generally be of the form p = dk + 1 for some d\L, so this requirement of 
p being a quadratic residue mod L does not run afoul of the other requirements on 
P- 

Alford, Granville, and Pomerance [AGP] make use of the fact that, apart from 
cases of exceptional moduli, the number of primes less than i in a congruence 
class modulo c can be estimated using classical estimates as long as c < x x l B . 
Unfortunately, since our primes p must now fulfil requirements mod L, we require 
that x be larger than (ML') 2 ' ' B (for an L' slightly larger than L), which is much 
a greater x than is required in the original paper. It should be noted that there is 
actually one benefit to this increased x. Specifically, at a key point in the original 
proof of [AGP], there is sum over all the divisors d of L with d < x; in our paper, 
this is simply the sum of all divisors of L, which means that we can give an exact 
evaluation, rather than an estimate, for this quantity. 

Unfortunately, the downside of using the larger x is that we end up with a rather 
low asymptotic for the number of Carmichael numbers up to X; [Ma] shows that 
in the case where a is a quadratic residue modulo M, the density is » x 1 / 5 , and 
there does not seem to be any heuristic justification that a similar lower bound 
should not apply here. In fact, it is entirely possible that one could find a lower 
bound 3> a; 1-0 ' 1 ' (as has been conjectured for the number of Carmichael numbers 
themselves), but this sort of result is probably a long way off. 

The primary change that we introduce (requiring that all of the primes be qua- 
dratic residues mod L) may be subtle, but it seems likely that this new technique 
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can help with other problems related to Carmichael numbers. For example, an 
open problem mentioned in [AGP] is to determine whether, for fixed integers a and 
b, there are infinitely many natural numbers n for which p\n implies p — a\n — b. 
This problem relates to Carmichael numbers via Korselt's Criterion, which states 
the following: 

Korselt's Criterion. A natural number n is a Carmichael number if and only if 
n is square-free and for every prime p that divides n, p— l\n — 1. 

As such, it is obvious that [AGP] resolves the case when a = b = 1. The 
generalization to other a and b, however, is still an open problem, and this problem 
has been described as having "significance for variants of pscudoprime tests." The 
current paper can be easily altered to resolve this problem in the affirmative in the 
additional case of a = b = — 1 . 

One could also use our method to show that for any a, M G N, there arc infin- 
itely many Carmichael numbers m such that the number of prime factors of m is 
congruent to a (mod M). 

We take these and other issues up in future papers (see [Wr2], [Wr3]). 

2. Primes in Arithmetic Progressions 

Our first step will be to identify the primes that we will use to construct the L 
mentioned above. Let 1 < 9 < 2, and let P(q — 1) be the size of the largest prime 
divisor of q — 1. We then define the set Q by 

v 9 

Q = {q prime : < q < y 9 , q\M, q = -1 (mod 40(M)), P(q - 1) < y). 

log y 

We will require that \Q\ be reasonably close to ir(y 9 ). To this end, we prove the 
following: 

Lemma 2.1. For Q as above, there exist constants 7 = j(6,M) and Yq ^m) such 
that 

ify > Y 0,<f>(M) 

Proof. This proof appears in [Ma] ; we replicate it here. 

For v < z, let us denote by itd,b{z, v) the number of primes q less than z such 
that P(q — l)<v and q = b (mod d). Let | < a < |, and define e = e(a) < a — |. 
Note that if q < z is such that q can be written as q = 1 + q'k for some prime 
q' e [z 1 ~ a , z2~ £ ] then P(q — 1) < z a ; each q has at most two such representations. 
So 

Vd,b(z, z a ) > - #{<? prime, < q < z, q = l (mod q ), q = b (mod d)}. 

z 1 log z 

q'eF, z 1 -"<g'<z5' < 

Since d is fixed and q is sufficiently large relative to d and q' , we can consolidate 
our requirements on q to be a single congruence modulo dq' , and hence we may use 
Bombieri- Vinogradov to find that 



8<j>(dq') log z ~ b \l~aJ 8<f>(d) log z ' 
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The lemma then follows by letting d — 40(M), b = —1, z = y e , a = min{^, |}, 
and 7- 8^3) lo g(fe)- D 

The next step is to construct an L and prove that there are a large number of 
primes that satisfy a variety of congruence conditions modulo L and M. However, 
we must first deal with a technicality involving the densities of primes in specific 
arithmetic progressions. 

In particular, fix B such that < B < 5/12. Theorem 2.1 of [AGP] says that 
for any x there exists a set of integers T>b{x), where \T>b{x)\ is bounded by some 
constant Db and every integer in T>b(x) is greater than logx, such that if d is not 
divisible by an element in T>b{x) and d < min{x B , z/x 1 ^ 3 } then 

, , . 7r(z) 

7F(z ' d ' c) - 20(d)' 

for any c with (c, d) = 1. Since we will wish to use this density estimate, we must 
be careful that our moduli are not divisible by an element of T>b(x). 

In the original proof of Alford, Granville, and Pomerance [AGP], the authors 
apply this density estimate to find a lower bound for the number of primes up to 
x that are 1 modulo the various divisors d of L. For this, the authors can work 
around this issue of problematic moduli by simply ignoring those divisors d that 
are divisible by elements of Pg(i) and then invoking the density theorem on the 
remaining divisors; since |X>b(2;)| is bounded, this still leaves many d from which 
one can find primes as required. Unfortunately, the luxury of simply ignoring 
inconvenient d is not afforded to us in the present case, as we will also be requiring 
that all of our primes be quadratic residues modulo i, which means that we must be 
certain that L is not divisible by any element of T>b{x). To ensure that no member 
of T>b(x) divides L, we will first create an L' for the purposes of determining our x; 
after this, we will remove from our L' any multiples of elements in T>b{x), leaving 
us with an L for which our density theorem applies. 

We begin first with our definition of L'. Let 



qeo. 

For fixed B with < B < 5/12, we then choose x to be 

x = \(ML')*]. 

Now, for T>b(x) as described above, we can choose a set of primes Pb(x), where 
|-Pb(£)| < Db, such that any element in T>b(x) is divisible by at least one of the 
primes in Pb{x). From this, let 

L = n * 

By this definition, no factor of L is divisible by an element in T>b{x). Moreover, 
since every element of T>b(x) is of size at least logx, the assumption that y is 
sufficiently large relative to M implies that no divisor of M is in T>b{x). 

As mentioned above, we wish to show that there are a large number of primes 
less than x that are 1 modulo divisors d of L while also being quadratic residues 
mod L and congruent to a modulo M. It is worth noting that (M, L) = 1 (since we 
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may assume that y is large relative to M), which ensures that these requirements 
on congruence classes do not contradict one another. 

By analogy with the convention for denoting primes in arithmetic progressions, 
let us use the notation n(z,d,QR) to indicate the number of primes up to z that 
are quadratic residues mod d. Then we can prove the following: 

Lemma 2.2. For any a with (a, M) = 1 and any z > x 1 ^^ , 



n(z, L, QR) n ir(z, M, a) > 



z 



2 ^(L)+i^(M)logz' 
where uj(L) denotes the number of prime factors of L. 

Proof. Clearly, the number of congruence classes mod M is <j>{M). Moreover, if 
we work mod L, we note that the number of congruence classes that are quadratic 
residues modulo each prime q\L is exactly of the q— 1 classes which can contain 
prime numbers. By Chinese Remainder Theorem, this means that the number of 
congruence classes mod L that are quadratic residues is exactly OqiiC 2 ^") °f the 
Y[ q \L 9^1 — <H^) congruence classes which yield a prime. 

Now, since ML < min{x B , z/x 1 ^ 3 } and ML has no factors in Db, we can 
apply Theorem 2.1 from [AGP] to congruence classes modulo ML. In particular, 
we know that in the (j)(ML) applicable congruence classes modulo ML, the number 
of primes in any one of these class will be 

~ 2<j)(ML)' 

Since there are Il(j|L(^ir") °^ these classes which would yield a quadratic residue 
mod L, we have that the number of primes that are a mod M and a quadratic 
residue mod L are 

7tQ) 

" 2"( i )+V(M)' 

which is as required. □ 

By analogy to the original paper of [AGP], for a given integer d\L with 1 < d < 
x "2 for some fixed B > 0, we wish to count the number of primes p for which p = 1 
(mod d) and {{p — 1) / d, L) = 1. However, since we chose x to be \(ML')b~\ : every 
divisor d of L will be < x^ . As such, we find the following: 

Lemma 2.3. Let B < 5/12, and let L be as above. Then there exists a k < x 1 ^^ 
with (fc, L) — 1 such that 

#{d\L : p = dk + 1 is prime, p is a QR mod L, p = a (mod M), p < x} 

> (tr (i) 



4- 4>{M) logx' 
Proof. Above, we proved that for z > x x ~% , 

n(z,L,QR)nir(z,M,a) > 2^( L ))^(M)logz ' 

If we add the additional constraint that the prime p also be 1 mod d for a given 
d\L, we have 



widx 1 ~ ,d,l)DTr(dx 1 ~ , L, QR)DTr(dx 1 ~,M,a)> 



2 • 2"( L )-"( d )0(M)0(d) log a;' 
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where the savings of 2 bJ ( d " > in the denominator conies from the fact that we no longer 
have to worry whether p is a quadratic residue mod d, and hence the requirement 
that p be a quadratic residue mod L is satisfied if p is a quadratic residue mod 

We must now determine how many of these primes satisfy the additional condi- 
tion of ((p — l)/d,L) = 1. We require the technical condition that J2 q \L Tpr — M' 
however, just as in [AGP], this is easily verified for the L we have chosen. 

Now, for any prime q which divides L, we have (by Montgomery and Vaughan's 
explicit version of the Brun-Titchmarsh theorem [MV]) that 



iridx 1 ~,dq, 1) Hir^dx 1 ~,L,QR) Dirjdx 1 ~,M,a) 

2dx 1 -% 

< 5 

2"W-<"(«O-i<£(M)0(dg) logOr 1 -- /q) 
8 dx l -i 



1)(1 - f ) 2^ L )-^ d )<P{M)(j){d) logs' 
since q < a^ 1- "?'/ 2 by construction. Putting these together, we have that 
Tr(dx 1 -%,d,l)nTT(dx 1 ~%,L,QR)nn(dx 1 ~ J ?,M,a) 

n(dx 1 ^^,dq,l)r\n(dx 1 -^,L 7 QR)r\'K(dx 1 ^^,M,a) 



> 



q\L, q prime 

dx 1_ T „ 8 dx 1 



2-2"( L )-"( d )(i>(MU(d)logx , ^ (q- 1)(1 - f) 2"( L )-"( d WMU(d) log a; 

q\L, q prime v ' ■ * ' 



\-S- 

X 2 

>- 



■ 4 . 2 "(i)-^(d)0(M) logx' 

where the final step is by the fact that J2 q \ L -^zj < ^j- This means that we have 
at least 

EX 1 2 
4 ■ 2 w ( L )- w ( d )0(M) log x 

pairs (p, d) such p is prime, (p — l)/d = k is relatively prime to L, p satisfies 
the required congruences (a mod M and QR mod L), p < dx 1 ~'% , and d < x"? . 

Since the number of possible distinct values for (p — is bounded by x 1- ^", 
there must exist some value k such that (fc, i) = 1 and k has at least 

2 w(d) 

2^ 4 . 2 "(i)0(M) logx 

representations as (p — for p, d as above. 

The numerator can be evaluated by a standard combinatorial identity: 

= U ( L ) \ 2"( L )- i = (2 + I)"* 1 ) = 3"( L ), 

d\L i=0 ^ % ' 

and hence 

.0,(1,) 



_ JP-W _ (|) 



4-2"( L )0(M)logx 4-</>(M)logx' 



□ 
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Let ko be the k found above for which there exist many primes of the form dk + 1 
for d\L. Let us define 

V — {p prime : p = dk a +l for some d\L, p is a QR mod L, p = a (mod M), p < 
The above lemma then gives a lower bound for the size of \V\. 

3. Size of A(G) 

Now, let L be as above. As usual, for a group G, we define A(G) to be the largest 
order of an element in G; in our case, we have G = (Z/MLZ) X . Since A(G) is free 
of prime factors of size greater than y (by assumption on the types of primes that 
divide L), we know that if q a " | A(G) then q < y and q a " < y e . Thus, if we let a q be 
the largest power of q such that q a " < y 6 then 

A(G) < \{ q a « < y 6 ^ < e 28y . 

q<y 

In the next section, we will compare this quantity to the number of primes 
generated by our choice of L. 



4. Sizes of Other Important Quantities 

In this section, we make use of a theorem from Baker and Schmidt [BS, Propo- 
sition 1], although the exact formulation of it comes from [Ma]. To begin, for an 
abelian group G, n(G) is defined to be the smallest number such that a collection 
of at least n(G) elements must contain some subset whose product is the identity. 
Based upon the work of van Emde Boas and Kruyswijk [EK] and Meshulam [Me] , 
it is known that 

„, G)£ „ G ,( 1 + ^M 

With this notation, we now state the theorem. 

Theorem 4.1. For any multiplicative abelian group G, write 

s(G) = [5A(G) 2 r»(A(G))log(3A(G)fi(|G|))l, 

where fl(\G\) indicates the number of prime divisors (up to multiplicity) of \G\. 

Let A be a sequence of length n consisting of non-identity elements of G. Then 
there exists a non-trivial subgroup H C G such that 

(i) If n> s(G), then, for every h G H, AC\H has a subsequence whose product 
is h. 

(ii) If t is an integer such that s(G) < t < n — n(G) then, for every h £ H, 
A has at least ( n ) / ( rr*\ I distinct subsequences of length at most t 



t - n(G) J 1 \ n(G) 
and at least t — n(G) whose product is h. 

Proof. See Lemma 6 of [Ala] . 

□ 

For the rest of the paper, we will use this result in the case of G = (Z/MLZ) X 
and A = V. To do this, we must bound the quantities n and s in terms of y and 9: 



8 



THOMAS WRIGHT 



Lemma 4.2. For s(G) and n(G) as defined above, G = (Z/MLZ) X , and y suffi- 
ciently large, 

s(G) < e 78y , 
n{G) < e 36y . 

Proof. Follows from the fact that A(G) < e 29y and M is a constant. □ 

We require one more piece of information about the size of one of our variables 
before completing the proof of the main results. Specifically, we would like to know 
the size of L itself. To this end, we have the following: 

Lemma 4.3. For y sufficiently large, there exist constants < K\ < K2 such that 

e KlV " <L< e K2V$ . 

Proof. The upper bound of the product of the primes up to x is well known to be 
less than e imx (see [RS]). We can thus choose «2 to be 1.02. 

For the lower bound, define Eq(u) to be 1 if n € Q — Db(x) and otherwise. 
Note that 

v" / e \ 

logL= Y, E Q (n)logn>\Q-D B (x)\log(f—)>jy e . 

yd *• y / 

n log y 

□ 

5. Proof of Main Theorem 

Theorem 5.1. Let V be the set of primes defined at the end of Section 2, let 
G = (Z/MLZ)*, and let s(G) be as in Theorem\JJ\ Then \T\ > s(G). If H is the 
subgroup of G guaranteed by Theorem \4-l\ ( applied using V as our A ) then there 
exists an element h £ H such that 

h = 1 (mod L), 

h = a (mod M). 

Eguivalently, there exists a subset ofV whose product is a Carmichael number that 
is congruent to a (mod M). 

Proof. The fact that \V\ > s(G) is obvious from the computation of both of these 
quantities in Lemmas 12.31 and 14.21 respectively. So V n H is non-empty. Thus, let 
Ph be a prime such that pn 6 V f~l H . 

By construction, pu is a quadratic residue mod L. So ordL{pn)\ Yl q \L j! • Since 
L is the product of primes that are 3 mod 4, this implies that the order of pn is 
odd modulo L. By assumption, (^p-, 4>(M)) — 1 for every prime q\L, which means 
that there exists an integer r such that 

r = (mod ordi(j>ij)), 

r = 1 (mod <j){M)). 
Since pu £ H and H is a group, p r H must also be in H. But 

Ph = 1 ( mod L), 
p r H = a (mod M), 
which gives us the required congruence conditions. 
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Now, by Theorem 14. 1[ the above congruences imply that there exists a square- 
free n, composed of primes in V , such that 

n = 1 (mod L), 
n = a (mod M). 

Since n is a product of primes that are all 1 modulo k, it follows that n, too, is 
1 mod k. So for any prime p\n, we know that p — l\kL\n — 1. Thus, by Korselt's 
Criterion, n is a Carmichael number that is congruent to a modulo M . □ 

Let us now use the second part of Theorem 14.11 to prove the asymptotic. We 
must choose a t such that s(G) < t < n — n(G). As such, we will let 



60 • (j)(M) logs' 



Main Theorem. Let Cm,o(A) be the number of Carmichael numbers up to X that 
are congruent to a mod M. Then there exists a constant K > such that 



C M AX) » (X)a= gl o gl o gX) ^ . 

Proof. Clearly, s(G) < t < \V\ — n(G). So the number of products of at most t 
primes in \T J \ whose product is 1 mod L and a mod M is at least 

W\-n{G) \ ( \V\ 
t - n(G) J 1 \ n(G) 

Of course, we recall from Lemma \A. 21 that n(G) is much smaller than both V and 
t. So it is clear that 

\V\-n{G)> |m 

and 

t-n(G)>h. 
We will also use the standard bound that 





u 




r<-( 






V 





Putting these four statements together, 

W\-n(G) \ / ( \P\ 



t-n(G) J 1 \ n(G) 



W\-n(G) \ ,( \V\ 



t-n(G) '/ 



4| P|\ 3 * , /3e|P| 



> ^ / 



> 



t J \ t 
16 /|P| X hi 



75eJ V t 
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By Lemma 12.31 and the definition of t, we have 

i6 \»* nv\ 

75e/ It 



> 



> 



4' 



16 ■ 15 

75e j ^(1)"^' 

4 



Recall from Lemma \2. II that 



Define 



log y e 



Using the bound for w(L) above and the definition of t, we have that for y sufficiently 
large, 

(log log log X) 2 > \ogy . 
Moreover, from Lemma 14.31 we have 

2^9 

x < { e ^y ) 2t . 

Note also that any Carmichael number that is the product of at most t primes in 
V must be less than X. So the number derived from the combinatorial functions 
above is a lower bound for Cm,o,{X). 

As such, we have that, for sufficiently large values of y, 

^(^((£f (L) ) 

, Tlog(1.2) 
t\ 3 



> (X) 12« 2 (l°sl°Bl°g*) 2 , 

where the second line is again from Lemma 14.31 The theorem then follows. □ 
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